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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the application: 
Listing of Claims: 

1 . (currently amended) A method for handling failures in a data plane of a 
plurality of data planes, the method comprising: 

generating a partitioned data structure, wherein the partitioned data structure is 
generated from a control processor separate from the plurality of data planes, the control 
processor including a failure detector, and the data structure includes one or more partitions for 
each of the plurality of data planes, each partition including routes for a source data plane to a 
destination data plane; 

sending one or more partitions from the partitioned data structure to a data plane 
that is the source data plane in the routes; 

detecting a failure in a failed data plane in the plurality of data planes, wherein the 
failure detector is configured to detect the failed data plane in the plurality of data planes; and 

notifying data planes other than the failed data plane in the plurality of data planes 
that the failed data plane has failed, wherein the notified data planes do not send data for the one 
or more routes found in a partition associated with the failed data plane; 

detecting when the failure has been restarted; and 

notifying the data pl anes other than the failed data plane that the failure has been 
restarted, wherein the data planes send data for the one or more routes found in a partition 
associated with the faile d data plane after being notified that the failure has been restarted . 

2. (original) The method of claim 1, wherein one partition includes all routes 
from a source data plane and to a destination data plane. 

3. (original) The method of claim 1, further comprising removing any data 
partitions that have been received at the data planes that have the failed data plane as the 
destination data plane. 
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4. (currently amended) The method of claim 1, further comprising: 
detecting when the failure has b e en restarted; and 

sending one or more partitions that include the failed data plane as the source data 
plane in the routes to the failed data plane after the failure has been restarted . 

5. (canceled) 

6. (previously presented) The method of claim 3, further comprising if any 
partitions were removed, restoring the removed partitions. 

7. (original) The method of claim 6, further comprising sending the removed 
partitions to each data plane other than the failed data plane. 

8. (currently amended) The method of claim 7, wherein the sending step is 
performed without th e control processo r initiated bv data planes other than the failed data plane . 

9. (original) The method of claim 1, further comprising: 
storing the data structure in persistent storage; and 

sending one or more partitions to the failed data plane from the persistent storage 
after the failed data plane is restarted. 

10. (currently amended) The method of claim 9, wherein the sending step is 
performed without the control processor initiated by data planes other than the failed data plane . 

1 1 . (original) The method of claim 1, further comprising separating each 
partition in the partitioned data structure. 

12. (previously presented) A method for handling failures in a data plane in a 
plurality of data planes, the method comprising: 

generating a partitioned data structure, wherein the partitioned data structure is 
generated from a control processor including a failure detector, and the data structure includes 
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one or more partitions for each of the plurality of data planes, each partition including routes for 
a source data plane to a destination data plane; 

sending one or more partitions from the partitioned data structure to a data plane 
that is the source data plane in the routes; 

detecting when a failure in a failed data plane in the plurality of data planes has 
been resolved, wherein the failure detector is configured to detect the failed data plane in the 
plurality of data planes; and 

sending the failed data plane a partition associated with the failed data plane, 

wherein the partition allows the failed data plane to resume sending data 
according to the routes found in the partition. 

13. (original) The method of claim 12, further comprising notifying data planes 
other than the failed data plane that the failed data plane has failed, wherein the notified data 
planes do not send data for the one or more routes found in a partition associated with the failed 
data plane. 

14. (original) The method of claim 12, further comprising notifying data planes 
other than the failed data plane that the failure has been resolved, wherein the notified data 
planes resume sending data for the one or more routes found in a partition associated with the 
failed data plane. 

15. (original) The method of claim 12, wherein one partition includes all routes 
from a source data plane and to a destination data plane. 

16. (original) The method of claim 12, further comprising removing any data 
partitions that have been received at the data planes that have the failed data plane as the 
destination data plane. 

17. (original) The method of claim 16, further comprising if any partitions were 
removed, restoring the removed partitions. 
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18. (original) The method of claim 17, further comprising sending the removed 
partitions to each data plane other than the failed data plane. 

19. (currently amended) The method of claim 18, wherein the sending step is 
p erformed without the control proccaao r initiated by data planes other than the failed data plane . 

20. (original) The method of claim 12, further comprising: 
storing the data structure in persistent storage; and 

sending one or more partitions to the failed data plane from the persistent storage 
after the failed data plane is restarted. 

21 . (currently amended) The method of claim 20, wherein the sending step is 
performed without th e control proces s o r initiated bv data planes other than the failed data plane . 

22. (original) The method of claim 12, further comprising separating each 
partition in the partitioned data structure. 

23-24. (canceled) 

25. (currently amended) A system for handling data plane failures, the system 

comprising: 

a plurality of data planes; and 

a control processor separate from the plurality of data planes; 

a receiver configured to received routes for route data, each route 
specifying a_source data plane in which data is sent and a destination data plane in which data is 
received; 

a failure detector configured to detect a failure in a data plane in the 
plurality of data planes; 

a data structure generator configured to generate a data structure that 
groups the routes by a source data plane for each of the plurality of data planes; and 
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a distributor configured to distribute the grouped routes to each associated 

source data planer 

a notifier configured to notify data planes other than the failed data plane 
of the failure, wherei n the data planes are configured to not send data to a failed data plane upon 
the notification. 

wherein the plurality of data planes comprise storage for storing the 
grouped routes that are received from the distributor. 

26-28. (canceled) 

29. (currently amended) The system of claim 23 25, wherein the data planes are 
configured to remove a partition associated with the failed data plane upon the notification. 

30. (original) The system of claim 25, wherein the control processor comprises a 
detector configured to detect when a failure in a data plane has been restarted. 

3 1 . (currently amended) The system of claim 30, wherein the control processor 
comprises a notifier is further configured to notify the data planes other than the failed data 
plane that the failure has been restarted. 

32. (original) The system of claim 31, wherein the data planes other than the 
failed data plane are configured to start sending data to the data plane whose failure had been 
restarted. 

33. (original) The system of claim 31, wherein the data planes other than the 
failed data plane are configured to reinstate the partitions associated with the failed data plane 
whose failure has been restarted. 

34. (original) The system of claim 31, wherein the distributor is configured to 
send the failed data plane whose failure has been restarted partitions that have the failed data 
plane as the source data plane. 
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